CVE-2021-4034

CVE-2021-4034 — PwnKit Local Privilege Escalation · Master's Thesis Research -orange Memory corruption vulnerability in polkit's pkexec utility Local Privilege Escalation → root via out-of-bounds write Affected: polkit 0.105-31 and earlier · Patch: polkit 0.105-33 January 2022 Interactive root...

CVE-2024-21762

CVE-2024-21762 out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability Exploit poc by assetnote root@kitploit: ssldohandshakeptr = b"%60%ce%42%00%00%00%00%00" getcwdptr = b"%70%62%2c%04%00%00%00%00" pivot1 = b"%52%f7%fd%00%00%00%00%00" push rdi; pop rsp; ret; pivot2 =...

CVE-2021-22555-Poc

Heap OVerflow CVE CVE-2021-22555 List of Bugs Heap Out-of-Bounds WriteThe core Bug Data Corruption The Immediate Effect Memory Leak / Information Disclosure Privilege Escalation The Final Goal 1. Install compilation tools do NOT run apt upgrade Download iso wget...

CVE-2021-1732

Windows Privilege Escalation Exploit for CVE-2021-1732 Win32k - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors @Exploit Blizzard Vulnerability Description A vulnerability exists within win32k that can be leveraged by an attacker ...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

CVE-2017-5123

CVE-2017-5123 PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR The waitid implementation in upstream kernels did not restrict the target destination to copy information results. This can allow local users to write to otherwise protected kernel memory, which can lead to privilege escalation...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

CVE-2026-88053

Tesseract OCR engine (version 5.5.3 and earlier) is vulnerable to a heap out-of-bounds write in Classify::ReadIntTemplates (src/classify/intproto.cpp). The function reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP component of a crafted .traineddata file and uses them...

CVE-2026-88052

Tesseract is an open-source OCR engine. In versions 5.5.3 and earlier , the function UNICHARSET::load_via_fgets (in src/ccutil/unicharset.cpp) uses a declared unichar count as a loop bound and indexes into the unichars vector with an unchecked id. Because unichar_insert_backwards_compatible can l...

CVE-2026-88052 Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

CVE-2023-42115

CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. Build root@kitploit: git clone...

CVE-2026-88050

A flaw was found in Tesseract. It was discovered that the RecodedCharID::DeSerialize function accepts negative code values from a specially crafted .traineddata recoder component. This can lead to an out-of-bounds write when SetupDecoder attempts to index a zero-sized vector with a negative code....

CVE-2026-88049

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

CVE-2026-88050

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

CVE-2017-0037

CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...

CVE-2026-88049

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit a heap out-of-bounds write vulnerability in the LSTM::Forward function by providing a specially crafted input. This could lead to heap corruption, application crashes, or...

CVE-2026-88050 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

CVE-2026-88050

Tesseract (open-source OCR engine) versions 5.5.3 and earlier contain an out-of-bounds write in the UnicharCompress component. The root cause is that RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts negative code_ values from a crafted .traineddata recoder ...

EUVD-2026-75593

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...